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DETAILED ACTION 



1 . This action is in response to the original filing of November 14. 2003. Claims 1- 
36 are pending and have been considered below. 

Claim Objections 

2. Claims 1 and 19 are objected to because of the following informalities: It recites, 
"the method for tracing", but there is no tracing performed in the body of the claim. 
Therefore, "tracing" does not carry patentable weight. Also, the word 'tor" indicates the 
intended use and such does not carry patentable weight either. The limitations 
following the phrase "for" describes only intended use but not necessarily required 
functionality of the claim and which do not carry patentable weight, which cause the 
claim to appear as a series of non functional descriptive material/data without any 
functional relation with each other. 

3. Claims 5, 9, 13, 17, 23, 27, 31, and 35 are objected to because of the following 
informalities: The word "CS" is needed to spell out in the body of the claim. 

« 

Appropriate correction is required. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful Improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 
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5. Claims 1-36 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

6. Claim 1 is non statutory because the language of the claim raises a question as 
to whether the outcome of the claim accomplishes a practical application, i.e.. produces 
a useful, concrete, and tangible result. Emulating is normally an abstract idea, but it is 
acceptable in this case because the phrase "wherein the instruction relates to creating 
or dismantling a stack frame" is actually performing something here. However, 
"creating or dismantling a stack frame" is an abstract idea. Creating or dismantling is 
just a defining step to define a stack frame, which is not a tangible result because the 
outcome is not realized as a monitoring or controlling or any other tangible output that 
would provide a utility. Therefore, the claim is non-statutory. Additional item to consider 
is the word "for" in the preamble of the claim. It indicates the intended use and such 
does not carry patentable weight. The limitations following the phrase "for" describes 
only the intended use but not necessarily required functionality of the claim and which 
do not carry patentable weight, which cause the claim to appear as a series of non 
functional descriptive material/data, per se, without any functional relation with each 
other and therefore, are non-statutory. Claims 2-18 directly or indirectly depend on 
claim 1 and therefore suffer the same rejection. 

Claim 19 is non-statutory because it recites a system but appears reasonable to 
interpret this system by one of ordinary skill in the art as software, per se. Applicant's 
specification provides no explicit and deliberate definition of the components 
("instrumented program" "a thread", "a trap handler") that make up the system other 
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than they could be software components, which are directed to functional descriptive 
material, per se, and are therefore non statutory. Additional item to consider is whether 
"to emulate the instruction associated with the trap instruction" accomplishes a practical 
application, i.e., produces a useful, concrete, and tangible result. Emulating process is 
an abstract idea since it is a pretending process to perform something. The claimed 
invention fails to define emulating process. Another additional item to consider is the 
word "for" in the preamble of the claim. It indicates the intended use and such does not 
carry patentable weight. The limitations following the phrase "for" describes only the 
intended use but not necessarily required functionality of the claim and which do not 
carry patentable weight, which cause the claim to appear as a series of non functional 
descriptive material/data, per se, without any functional relation with each other and 
therefore, are non-statutory. Claims 20-36 directly or indirectly depend on claim 19 and 
therefore have been addressed in connection with the rejection set forth in claim 19. 

Claim Rejections - 35 USC § 112 

7. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

r 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

8. Claims 1-36 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Claim 1 recites, "the instruction..." is unclear to the examiner as to whether it 
refers to the trap instruction or instruction. For examining purposes, examiner interprets 
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it as either trap instruction or instruction. Additional item to consider is whether "the 
instruction" (one instruction) can create or dismantle a stack frame. One of ordinary 
skill in the art would have known that in order to create or dismantle a stack frame, 
multiple instructions are needed. Claims 2-18 directly or indirectly depend on claim 1 
and therefore have been addressed in connection with the rejection set forth in claim 1 . 

Claim 1 9 is a system claim and recites the same limitation as recited in claim 1 
and therefore suffers the same reason set forth in claim 1 . Claims 20-36 suffer the 
same rejection as in 19. 



Claim Rejections - 35 USC § 102 

9. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined In section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the International application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

At 

10. Claim 1 is rejected under 35 U.S.C. 102(e) as being anticipated by Yates, Jr. et 
al. (United States Patent No.: US 7,065,633 B1). 



As per claim 1 : 

Yates discloses a method for tracing an instrumented program, comprising: 
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- triggering a trap instruction in the instrumented program ("an exception 
occurring during execution of a program coded in the CISC instruction 
set" Col 23, line 10-11; "the exception may be a trap requesting a file 
access service form the CISC operating system on behalf of the 
program" Col 23. line 25-27); 

- transferring control of the instrumented program to a trap handler associated 
with the trap instruction ("the interrupt is delivered to emulator 316, which 
handles the interrupt" Col 51, line 39-40); and 

- emulating an instruction corresponding to the trap instruction in the trap 
handler instruction ("the RISC operating system may include a collection 
interrupt service routines programmed to emulate instructions in the 
CISC instruction set" Col 23, line 13-15; "when a high-priority X86 
interrupt interrupts X86 emulator 316 while emulating a complex 
instruction... the interrupt is delivered to emulator 316, which handles 
the interrupt" Col 51, line 34-42), wherein the instruction relates to creating 
or dismantling a stack frame instruction ("if the program creates code in 
writable storage (stack or heap) on the fly" Col 40, line 16-17). 

As per claim 2 : 

Yates discloses the method as in claim 1 above; and further discloses: 
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- replacing tlie instruction with tlie trap instruction in the instrumented program 
("Probing" Col 30, line 24, probing is a process of replacing instruction 
with probe instruction for monitoring the program flow). 

As per claim 3 : 

Yates discloses the method as in claim 1 above; and further discloses: 

- calling into a tracing framework to execute an action associated with the trap 
instruction ( "during emulation of the X86 program, prober 600 monitors 
the program flow for execution of X86 instructions that have been 
translated into native code" Col 32, line 7-9). 

As per claim 4 : 

Yates discloses the method as in claim 1 above; and further discloses: 

- wherein emulating the instruction comprises emulating a push1 instruction 

( "any asynchronous interrupts that occur during the PUSHA converter 
recipe are handled in tapestry operating system 312 or in emulator 316" 
Col 132, line 23-25). 

As per claim 5 : 

Yates discloses the method as in claim 4 above; and further discloses wherein 
emulating a push1 instruction comprises: 
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- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and EC! onto the stack " Col 132, line 7-9); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marlced with an end-of-recipe 
marker" Col 1 22, line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offset 
specified by the stack pointer ESP" Col 136, line 7-1 0); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offeet into the code 
segment (EIP) is pushed onto the stack" Col 1 35, line 48-49); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); and 

- loading a base pointer into two location after the stack pointer location ("the 
eight STOREDEC instructions 951 push the eight general purpose 
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registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and ECl onto the stack " 

Col 132, line 7-9). 

As per claim 6 : 

Yates discloses the method as in claim 5 above; and further discloses: 

- decrementing the stack pointer location by one location ("the register carries 
the intermediate decrementing of the stacl( pointer" Col 132, line 43-44); 
and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 7 : 

Yates discloses the method as in claim 5 above; and further discloses: 

- wherein the instruction pointer is loaded at the stack pointer location 
STOREDEC, is a pre-decrementing store that pushes the IP value onto 
the stack segment (SS) at the offset specified by the stack pointer ESP" 
Col 136, line 7-10). 

As per claim 8 : 

Yates discloses the method as in claim 1 above; and further discloses: 

- emulating the instruction comprises emulating a enter instruction ("PUSHA" 
Col 132, line 36; MOV instruction" Col 132, line 41). 
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As per claim 9 : 

Yates discloses the method as in claim 8 above; and further discloses: 

- obtaining a stacl< pointer location, wherein the stack pointer location is 
corresponding to a locatiori in the stack frame ("the eight STOREDEC 
Instructions 951 push the eight general purpose registers EAX, ECX, 
EOX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132, line 7-9); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker" Col 122, line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offeet 
specified by the stack pointer ESP " Col 136, line 7-10); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing Is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); 
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- loading a base pointer into two location after the stack poiriter location ("the 
eight STOREDEC instructions 951 push the eight general purpose 
registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and EC! onto the stack" 
Col 132, line 7-9); and 

- loading the base pointer into a base pointer register ("EBP register of the 
X86 architecture are mapped by converter hardware 136 to register R53" 
Col 34, line 9-10). 

As per claim 10 : 

Yates discloses the method as in claim 9 above; and further discloses: 

- decrementing the stack pointer location by one location ("the register carries 
the intermediate decrementing of the stack pointer" Col 132, line 43-44); 
and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 1 1 : 

Yates discloses the method as in claim 9 above; and further discloses: 
• wherein the instruction pointer is loaded at the stack pointer location . 

(STOREDEC, is a pre-decrementing store that pushes the IP value onto 
the stack segment (SS) at the offset specified by the stack pointer ESP" 

Col 136. line 7-10). 
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As per claim 12 : 

Yates discloses the method as in claim 1 above; and further discloses: 

- wherein emulating the instruction comprises emulating a pop1 instruction 
("when an X86 POPF instruction is emulated" Col 58, line 1). 

As per claim 13 : 

Yates discloses the method as in claim 12 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132, line 7-9); 

- loading the base pointer obtained from three location after the stack pointer 
location into a base pointer register ("EBP register of the X86 architecture 
are mapped by converter hardware 136 to register R53" Col 34, line 9-10); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 
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- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker*' Col 122. line 38-40); and 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offset 
specified by the stack pointer ESP" Col 136. line 7-10). 

As per claim 14 : 

Yates discloses the method as in claim 13 above; and further discloses: 

- incrementing the stack pointer location by one location ("when an X86 
program changes its stack, both the stack segment descriptor (SS) and 
the offset may need to be changed" Col 144, line 65-67; "...the instruction 
that loads the stack offset ipto the stack pointer" Col 145, line 2); and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 15 : 

Yates discloses the method as in claim 13 above; and further discloses: 

- wherein the instruction pointer is loaded at the stack pointer location 
STOREDEC, is a pre-decrementing store that pushes the IP value onto 
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the stack segment (SS) at the offset specified by the stack pointer ESP" 

Col 136. line 7-10). 

As per claim 16 : 

Yates discloses the method as in claim 1 above; and further discloses: 

- wherein emulating the instruction comprises emulating a leave instruction ("at 
the end of emulating the move or pop instruction" Col 145, line 18). 

As per claim 17 : 

Yates discloses the method as in claim 16 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132. line 7-9); 

- loading the base pointer obtained at the base pointer location into base 
pointer register ("EBP register of the X86 architecture are mapped by 
converter hardware 136 to register R53" Col 34, line 9-10); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); 
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• loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker" Col 122. line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offeet 
specified by the stack pointer ESP" Col 136, line 7-10); and 

- loading the instruction pointer at three location before the base pointer ("EIP 
is pushed onto the stack" Col 1 35, line 49). 

As per claim 18 : 

Yates discloses the method as in clam 17 above; and further discloses: 

- setting the stack pointer location to three locations before the base pointer 
location ("the eight STOREDEC instructions 951 push the eight general 
purpose registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and ECl onto the 
stack" Col 132, line 7-9, the idea is to obtain the stack pointer); 

- incrementing the stack pointer location by one location ("when an X86 
program changes its stack, both the stack segment descriptor (SS) and 
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the offeet may need to be changed" Col 144, line 65-67; "...the instruction 
that loads the stacic offset into the stack pointer" Col 145, line 2); and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 19 : 

Yates discloses a system for tracing an instrumented program, comprising: 

- the instrumented program comprising at least one trap instruction associated 
with an instruction ("a trap instruction" Col 94, line 15), wherein the 
instruction relates to creating or dismantling a stack frame ("if the program 
creates code in writable storage (stack or heap) on the fly" Col 40, line 
16-17). 

- a thread configured to execute the instrumented program ("the operating 
system and the interrupted thread may execute in different instruction 
set architecture of the computer" Col 6, line 19-20); and 

- a trap handler ("trap handler" Col 125, line 52) configured to halt execution of 
the thread when the trap instruction is encountered and to emulate the 
instruction associated with the trap instruction (the RISC operating system 
may Include a collection interrupt service routines programmed to 
emulate instructions in the CISC instruction set" Col 23, line 13-15; "when 
a high-priority X86 interrupt interrupts X86 emulator 316 while emulating 
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a complex instruction... the interrupt is delivered to emulator 316, which 
handles the interrupf Col 51, line 34-42). 



As per claim 20 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- a tracing framework operatively connected to the trap handler configured to 
perform an action associated with the trap instruction ("during emulation of 
the X86 program, prober 600 monitors the program flow for execution of 
X86 instructions that have been translated into native code" Col 32, line 
7-9). 

As per claim 21 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- wherein the instruction is replaced with a trap instruction in the instrumented 
program ("Probing" Col 30, line 24, probing is a process of replacing 
instruction with probe/trap instruction for monitoring the program flow). 

As per claim 22 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- wherein emulating the instruction comprises emulating a pushi instruction 
("any asynchronous interrupts that occur during the PUSHA.converter 
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recipe are handled in tapestry operating system 312 or in emulator 316 " 

Col 132. line 23-25). 

As per claim 23 : 

Yates discloses the system as in claim 22 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and EC! onto the stack" Col 132. line 7-9); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker" Col 122. line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offset 
specified by the stack pointer ESP" Col 136, line 7-10); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135. line 48-49); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing Is 
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physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded In 
segment descriptors, the EFLAGS register'' Col 91, line 13-16); and 

- loading a base pointer into two location after the stack pointer location ("the 
eight STOREDEC instructions 951 push the eight general purpose 
registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and ECl onto the stack" 
Col 132, line 7-9). 

As per claim 24 : 

Yates discloses the system as in claim 23 above; and further discloses: 

- decrementing the stack pointer location by one location ("the register carries 
the intermediate decrementing of the stack pointer" Col 132, line 43-44); 
and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 25 : 

Yates discloses the system as in claim 23 above; and further discloses: 

- wherein the instruction pointer is loaded at the stack pointer location 
STOREDEC, is a pre-decrementing store that pushes the IP value onto 
the stack segment (SS) at the offset specified by the stack pointer ESP" 

Col 136, line 7-10). 
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As per claim 26 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- emulating the instruction comprises emulating a enter instruction ("PUSHA" 
Col 132, line 36; MOV instruction" Col 132, line 41). 

As per claim 27 : 

Yates discloses the system as in claim 26 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location is 
corresponding to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132, line 7-9); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value Is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker" Col 122, line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offset 
specified by the stack pointer ESP" Col 136, line 7-10); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 
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- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register'* Col 91 , line 13-16); 

- loading a base pointer into two location after the stack pointer location ("the 
eight STOREDEC instructions 951 push the eight general purpose 
registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and ECl onto the stack" 
Col 132, line 7-9); and 

- loading the base pointer into a base pointer register ("EBP register of the 
X86 architecture are mapped by converter hardware 136 to register R53" 
Col 34, line 9-10). 

As per claim 28 : 

Yates discloses the system as in claim 27 above; and further discloses: 

- decrementing the stack pointer location by one location ("the register carries 
the intermediate decrementing of the stack pointer" Col 132, line 43-44); 
and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 
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As per claim 29 : 

Yates discloses the system as in claim 27 above; and further discloses: 

- wherein the instruction pointer is loaded at the stack pointer location 
(STOREDEC, is a pre-decrementing store that pushes the IP value onto 
the stack segment (SS) at the offeet specified by the stack pointer ESP" 

CoM 36, line 7-10). 

As per claim 30 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- wherein emulating the instruction comprises emulating a popi instruction 
("when an X86 POPF instruction is emulated" Col 58, line 1). 

As per claim 31 : 

Yates discloses the system as in claim 30 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132, line 7-9); 

- loading the base pointer obtained from three location after the stack pointer 
location into a base pointer register ("EBP register of the X86 architecture 
are mapped by converter hardware 136 to register R53" Col 34, line 9-10); 
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- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer CVvhether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offeet into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker" Col 122, line 38-40); and 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offeet 
specified by the stack pointer ESP" Col 136, line 7-10). 

As per claim 32 : 

Yates discloses the system as in claim 31 above; and further discloses: 

- incrementing the stack pointer location by one location ("when an X86 
program changes its stack, both the stack segment descriptor (SS) and 
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the offeet may need to be changed" Col 144, line 65-67; "...the instruction 
that loads the stacic offeet into the stack pointer" Col 145, line 2); and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

As per claim 33 : 

Yates discloses the system as in claim 31 above; and further discloses: 

- wherein the instruction pointer is loaded at the stack pointer location 
STOREDEC, is a pre-decrementing store that pushes the IP value onto 
the stack segment (SS) at the offset specified by the stack pointer ESP" 
Col 136, line 7-10). 

As per claim 34 : 

Yates discloses the system as in claim 19 above; and further discloses: 

- wherein emulating the instruction comprises emulating a leave instruction ("at 
the end of emulating the move or pop instruction" Col 145, line 18). 

As per claim 35 : 

Yates discloses the system as in claim 34 above; and further discloses: 

- obtaining a stack pointer location, wherein the stack pointer location 
corresponds to a location in the stack frame ("the eight STOREDEC 
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instructions 951 push the eight general purpose registers EAX, ECX, 
EDX, EBX, ESP, EBP, ESI and ECl onto the stack" Col 132. line 7-9); 

- loading the base pointer obtained at the base pointer location into base 
pointer register ("EBP register of the X86 architecture are mapped by 
converter hardware 136 to register R53" Col 34, line 9-10); 

- loading an EFLAGS values stored two locations after the stack pointer 
location into one location after the stack pointer ("whether addressing is 
physical or virtual, the floating point stack pointer, and the full/empty 
state of floating-point register, and operand sizes are encoded in 
segment descriptors, the EFLAGS register" Col 91, line 13-16); 

- loading a code segment (CS) value stored one location after the stack pointer 
location into the stack pointer location ("the current offset into the code 
segment (EIP) is pushed onto the stack" Col 135, line 48-49); 

- incrementing an instruction pointer to obtain an incremented instruction 
pointer ("the instruction pointer (IP) value is incremented by the length 
count after each instruction that is marked with an end-of-recipe 
marker*' Col 122. line 38-40); 

- loading the incremented instruction pointer in the stack frame at one location 
before the stack pointer location ("STOREDEC, is a pre-decrementing store 
that pushes the IP value onto the stack segment (SS) at the offset 
specified by the stack pointer ESP" Col 136, line 7-10); and 
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- loading tlie instruction pointer at three location before the base pointer ("EIP 
is pushed onto the stack" Col 135, line 49). 

As per claim 36 : 

Yates discloses the system as in claim 35 above; and further discloses: 

- setting the stack pointer location to three locations before the base pointer 
location ("the eight STOREDEC instructions 951 push the eight general 
purpose registers EAX, ECX, EDX, EBX, ESP, EBP, ESI and ECl onto the 
stack" Col 132, line 7-9, the idea is to obtain the stack pointer); 

- incrementing the stack pointer location by one location ("when an X86 
program changes its stack, both the stack segment descriptor (SS) and 
the offset may need to be changed" Col 144, line 65-67; "...the instruction 
that loads the stack offeet into the stack pointer" Col 145, line 2); and 

- issuing a return from interrupt instruction ("a trap instruction transfers 
control to an exception handler" Col 94, line 15-16). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Phillip H. Nguyen whose telephone number is (571) 
270-1070. The examiner can normally be reached on Monday - Thursday 10:00 AM - 
3:00 PM EST. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wei Y. Zhen can be reached on (571) 272-3708. The fax phone number for 
the organization where this application or proceeding Is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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